Software can bypass the CAPTCHA in near future. These are the better option and always safe for online services to make their APIs safe from bruteforce attack:
- Throttle the requests: Some APIs can be only called after a small or large period of time
- Counter limit: Similar to TPM (PC), TEE (mobile), APIs can apply some request rating such as max number of requests in a period of time.
Although CAPTCHA is no longer safe in future, but it's still good for now in 2025.
No comments:
Post a Comment